CVE-2026-113147
published 2026-10-20CVE-2026-113147: Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
PriorityP353high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.51%
43.7th percentile
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 156.0.8078.47 | 156.0.8078.47 | |
| chrome | >= 156.0.8078.47 < 156.0.8078.47 | 156.0.8078.47 | |
| chrome_desktop | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Chrome
Stable Channel Update for Desktop: CVE-2026-113333
vendor_chrome·2026-10-20·CVSS 8.8
CVE-2026-113333 [MEDIUM] Stable Channel Update for Desktop: CVE-2026-113333
Stable Channel Update for Desktop
CVE-2026-113333: Memory corruption in Extensions. Reported by Google on 2026-04-10 [N/A][ 501531546 ] Medium CVE-2026-113147: Improper input validation in WebShare
Reported by Google on 2026-04-10 [N/A][ 501680084 ] Medium CVE-2026-113337: Memory corruption in Scroll
Severity: medium
VulDB
Google Chrome up to 155.0.8059.84 WebShare input validation (EUVD-2026-105514)
vuldb·2026-10-21·CVSS 8.8
CVE-2026-113147 [HIGH] Google Chrome up to 155.0.8059.84 WebShare input validation (EUVD-2026-105514)
A vulnerability categorized as critical has been discovered in Google Chrome. This impacts an unknown function of the component WebShare. Such manipulation leads to improper input validation.
This vulnerability is traded as CVE-2026-113147. The attack may be launched remotely. There is no exploit available.
It is advisable to upgrade the affected component.
GHSA
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.
ghsa_unreviewed·2026-10-21
CVE-2026-113147 [HIGH] CWE-20 Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
No detection rules found.
No public exploits indexed.
2026-10-20
Published